OCaml Based Volshell
With the current code base, it shouldn't be too hard to implement a version of Volshell in OCaml. This might ease the need to rebuild libbap every time one wishes to add in OCaml based program analysis code?
Currently, all code analysis is driven by manual input. More work needs to be performed here to take advantage of various automated analysis possibilities.
Currently, work is progressing on building a disassembler based on the ideas of Kruegel and Kinder. The intention is to use path-sensitive program analyses to construct disassembly CFGs that are consistent with the contents of process memory.
- Alternating Control Flow Reconstruction by Johannes Kinder and Dmitry Kravchenko. VMCAI'12: Proceedings of the 13th international conference on Verification, Model Checking, and Abstract Interpretation. 2012
- Static disassembly of obfuscated binaries by Christopher Kruegel, William Robertson, Fredrik Valeur and Giovanni Vigna. SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium. 2004
It is planned to produce an alternative version of this code based on the Low Level Virtual Machine. This should allow a greater range of processors to be supported whilst still maintaining a similar feeling analysis framework.